renovate
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the Renovate CLI and configuration validator from the official npm registry via
npx. - [EXTERNAL_DOWNLOADS]: References official Docker images and GitHub Actions provided by the
renovatebotorganization for self-hosting purposes. - [COMMAND_EXECUTION]: Describes the
postUpgradeTasksandallowedCommandsfunctionality. The skill correctly identifies the security implications of these features and provides guidance on restricting execution to trusted environments. - [SAFE]: Instructions for managing the
RENOVATE_TOKENfollow standard security practices by recommending the use of environment variables and platform-specific secret storage.
Audit Metadata